This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa File: 012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa (raw, json) Hash identifier: xJ+rwMm3oyNU5Eo5abH1J39CI3/AwtVABq15WfnkKOU= Subject key identifier: 36:F9:5C:B8:8B:AD:9D:4A:18:AA:92:CB:4C:B7:87:9B:B5:71:AF:DB Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584BE3F07BDC8D8F117D455A7100 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa Signing time: Mon 17 Nov 2025 14:00:39 +0000 ROA not before: Mon 17 Nov 2025 14:00:39 +0000 ROA not after: Sun 15 Feb 2026 14:00:39 +0000 asID: 33392 IP address blocks: 209.35.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e3:f0:7b:dc:8d:8f:11:7d:45:5a:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 17 14:00:39 2025 GMT Not After : Feb 15 14:00:39 2026 GMT Subject: CN=b0e38496-f6e1-4ef9-b95f-c025ab3e8954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5d:89:26:f0:6b:1b:02:8d:06:a3:68:e5:ad: 2c:c7:e5:b9:44:c6:1f:6e:ca:ce:11:a6:6e:7d:bf: a9:bd:53:98:55:cb:d9:aa:9b:ee:6c:ea:10:7a:8e: 70:02:ec:bd:00:9a:69:cd:0c:43:1b:d5:0d:04:80: 0a:dd:5e:00:d6:69:c1:7f:83:bf:aa:77:8b:f7:9e: 52:3e:7d:e5:66:9d:15:bb:3c:f5:20:0c:ff:aa:4d: 59:a7:ff:09:04:a0:2d:fb:00:1a:3f:a1:e5:f5:de: d1:23:62:d4:88:f6:53:c6:a9:cd:70:10:36:85:b7: f1:d5:f0:23:9f:62:f1:2c:40:30:8c:28:2e:e4:37: 96:57:a6:ca:d7:4d:c3:fc:b9:c9:e0:13:17:78:3b: 44:47:a0:ed:44:8f:b2:ec:da:13:1e:19:6d:d9:62: 14:61:cc:e9:de:77:1b:71:97:a2:37:56:c8:73:d0: ad:01:ef:ad:c6:8c:6d:db:e0:b8:c2:9c:25:ee:b5: 51:2c:5e:e6:31:1e:ae:19:df:13:e6:8c:41:32:2c: 77:52:fd:c6:fc:25:5f:ff:98:90:e4:61:61:9d:44: 1a:cb:b5:9b:f3:3b:eb:0e:fb:61:3f:55:03:b7:a3: 84:92:2c:ed:d0:7e:a5:43:40:cf:ae:e2:73:c3:da: 55:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F9:5C:B8:8B:AD:9D:4A:18:AA:92:CB:4C:B7:87:9B:B5:71:AF:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:68:2d:b9:82:f0:ff:93:64:43:35:95:c1:b0:48:27:09:c8: b3:83:00:3e:75:cd:49:24:5f:e4:f5:2a:89:a8:05:50:d0:8e: 74:32:2e:66:7b:14:53:02:44:1a:af:fd:fc:3b:cc:cc:3d:ca: 40:45:31:e5:d7:da:1e:e8:f3:51:f2:d8:73:56:d1:9d:17:3d: e9:36:7c:52:18:41:f0:0a:53:45:3c:78:8e:a4:e7:94:10:6f: a2:58:af:d4:e7:36:9e:47:ad:e6:ac:d7:2e:e5:7b:40:20:7b: a1:d1:9f:6c:7c:d6:cf:fc:8d:15:7d:e5:3d:ac:77:22:1e:b9: 31:78:27:ec:0f:a6:8a:32:65:17:52:f6:b8:1b:d2:47:81:5b: be:bc:f6:cf:ba:6f:2d:1e:f3:9a:11:bb:3d:0d:03:0c:5c:a7: d9:3f:30:68:fe:87:cd:b3:06:09:66:2c:1d:f5:76:97:17:40: 45:54:1f:00:ed:84:0e:08:de:b4:7c:da:5d:d3:13:90:0d:e5: bb:32:14:59:e9:b2:2d:46:65:cd:e0:60:e9:3d:1f:dc:b0:e6: 1c:04:5f:0c:2a:92:bc:13:81:56:41:2f:3e:69:0f:ea:a5:af: d6:ed:44:3e:85:ac:5c:43:01:f1:50:0d:45:07:a0:78:bc:40: 6f:7e:5d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvj8HvcjY8RfUVacQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MTExNzE0MDAzOVoXDTI2MDIxNTE0MDAzOVowLzEtMCsGA1UEAxMk YjBlMzg0OTYtZjZlMS00ZWY5LWI5NWYtYzAyNWFiM2U4OTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV2JJvBrGwKNBqNo5a0sx+W5RMYfbsrOEaZu fb+pvVOYVcvZqpvubOoQeo5wAuy9AJppzQxDG9UNBIAK3V4A1mnBf4O/qneL955S Pn3lZp0Vuzz1IAz/qk1Zp/8JBKAt+wAaP6Hl9d7RI2LUiPZTxqnNcBA2hbfx1fAj n2LxLEAwjCgu5DeWV6bK103D/LnJ4BMXeDtER6DtRI+y7NoTHhlt2WIUYczp3ncb cZeiN1bIc9CtAe+txoxt2+C4wpwl7rVRLF7mMR6uGd8T5oxBMix3Uv3G/CVf/5iQ 5GFhnUQay7Wb8zvrDvthP1UDt6OEkizt0H6lQ0DPruJzw9pVIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb5XLiLrZ1KGKqSy0y3h5u1ca/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDEyZjIxYmQtOGU4ZS0z MmQ3LThhN2ItMzczOGYzOGMzMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdoLbmC8P+TZEM1lcGwSCcJyLODAD51zUkkX+T1KomoBVDQjnQyLmZ7 FFMCRBqv/fw7zMw9ykBFMeXX2h7o81Hy2HNW0Z0XPek2fFIYQfAKU0U8eI6k55QQ b6JYr9TnNp5Hreas1y7le0Age6HRn2x81s/8jRV95T2sdyIeuTF4J+wPpooyZRdS 9rgb0keBW7689s+6by0e85oRuz0NAwxcp9k/MGj+h82zBglmLB31dpcXQEVUHwDt hA4I3rR82l3TE5AN5bsyFFnpsi1GZc3gYOk9H9yw5hwEXwwqkrwTgVZBLz5pD+ql r9btRD6FrFxDAfFQDUUHoHi8QG9+Xcs= -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:24 2025 by rpki-client